On Thu, 08 Jul 2010 01:04:53 +0200, Mark S. Miller <erights@google.com>
wrote:
> Why would public images or fonts need credentials?
I don't know about fonts, but <img> fetching has been done with
credentials since dawn of time and changing that will have compatibility
consequences. Making such requests go without credentials is orthogonal
though to figuring out whether we want to allow the wildcard while the
credentials flag is true.
--
Anne van Kesteren
http://annevankesteren.nl/